CVE-2026-8779

MEDIUM 4.3

omec-project amf handler.go NGSetupRequest memory corruption

CVSS Score

4.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability was determined in omec-project amf up to 2.1.3-dev. Impacted is the function NGSetupRequest of the file ngap/handler.go. Executing a manipulation of the argument InformationElement can lead to memory corruption. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.2.0 is recommended to address this issue. The affected component should be upgraded. The same pull request fixes multiple security issues.

CWE	CWE-119
Vendor	omec-project
Product	amf
Published	May 18, 2026
Last Updated	May 18, 2026

Stay Ahead of the Next One

Get instant alerts for omec-project amf

Be the first to know when new medium vulnerabilities affecting omec-project amf are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

omec-project / amf

2.1.3-dev

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/364403 vuldb.com: https://vuldb.com/vuln/364403/cti vuldb.com: https://vuldb.com/submit/811616 github.com: https://github.com/omec-project/amf/issues/671 github.com: https://github.com/omec-project/amf/pull/666 github.com: https://github.com/omec-project/amf/releases/tag/v2.2.0 github.com: https://github.com/omec-project/amf/

Credits

🔍 shovon0203 (VulDB User) VulDB CNA Team